Two guest-to-host escapes in one month, patched at fleet scale with zero customer impact
DigitalOcean shipped its first Januscape livepatch 45 minutes after the page, closing thousands of hypervisors within 48 hours on kernels where the upstream fix even existed. Then a second, harder AMD issue hit the 1,600 hosts that couldn't be livepatched, forcing a full kernel update and reboot three weeks later. The lesson worth stealing is the long tail: a few hundred 5.10-kernel hosts had no upstream patch, so the team wrote new livepatches from scratch. A credible account of what real fleet-scale security operations look like under pressure.